Draft: [13.5] Fix panic when PKCS7-encoded payload has no certificate

pkcs7.Parse() can return a nil payload if no certs were decoded. We need to check that there are certificates before returning the first one.